Broadridge 
Professional Services 


Operational intelligence to drive business transformation 





Broadridge’ 


Navigate Regulatory, Operational and Data Challenges 





Partner with Broadridge for our industry expertise, experience and solution insights 


Q Unique industry vantage point . © - Unmatched domain expertise 
a) = 


Proven technology and business ® Holistic enterprise-wide approach 
process standards -Ə 


PROFESSIONAL SERVICES SNAPSHOT PROFESSIONAL SERVICES FOOTPRINT DEPTH 


100+ 25 16+ 4 


Expertise which we have and Growing 
Assisted Clients 








Companies 


We have helped over 100 companies globally 
transform their businesses and optimize their 
processes, positioning them for future success 
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Empower Your Transformation with Confidence 


a KR Q 





Q 


a  iroiement E 





Current Operations Strategic Plans Compliance with Project Management 
Industry Initiatives 


Alternative Business Objectives Outsourcing 
Technology Solutions New Vendor Functionality 


Software Solutions 5°lutions 


Account Imbalances Outsourcing Services 


System Staff Trainings 


New Regulatory Infrastructures Consolidating Data 
Requirements Broadridge Solution 


Expertise 


System Efficiencies Organizing Data 


Managing Data 
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Operational Transformation 
Migration Roadmap Developments 
Process & Dataflow Optimization 
Business Architecture and Process 
Target Operating Model Design 


Communications Transformation 
Benchmarking & Insights 

Digital Transformation Strategy 

Information Design & Content Development 


Customer Experience 

Omni Channel Strategy 

Customer Touchpoint Analysis and Optimization 
Preference Management 






Broadridge Professional Services Wheelhouse of Expertise 


Enterprise Data Solutions 

Data Governance 

Master Data Management 
Enhanced MIS Capabilities/Analytics 


Technology Solutions 

Technology Assessments and Roadmap 
Enterprise Architecture Strategy 
Buy/Build/Outsource Assessments 
Interface Design & Development 


Finance Transformation 


Financial Processes & Systems Redesign 
Finance Strategy Alignment 

Financial Statement Integrity Improvement 
Accounting and Regulatory Change Compliance 


Core Competencies 


Staff/Project Augmentation 
Program Management 

Line Role or Project Backfill 

Test Planning & Execution 
Interim Leadership 


Regulatory Solutions 


Change Management 
Regulator Communications & Exam Preparation 
Remediation & Reporting 


Internal Audit Solutions 

Methodology Development 

Co-sourcing / Outsourcing 

Quality Assurance and Improvement Program (QAIP) 





Risk Management 


Governance, Risk & Control Frameworks 
Risk Assessment Methodologies 
Model Risk Management 
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Sample Engagements 


heal 
a 
ey 


[| 
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Derivatives System Selection and Process Optimization 


Context & Objectives Approach 


Project Profile 


The client needed a 
derivatives work flow 
process re-engineering to 
support more exotic 
derivative structures. 
Manual solutions were 
prone to errors and time 
consuming to manage, 
administer and price 

The lag on managing this 
book of business carried 
business and opportunity 
risk that required technology 
investment for better 
controls and turnaround, 
especially for pricing. 





Gathered needs from 
interviews with key users 
and business sponsors 
Prioritized needs based on 
previous assessment/ 
industry best practices 
Built mock-up scenarios 
(with sample data) for 
vendors to provide demos 
Provided vendor 
recommendations for a 
front-to-back derivatives 
processing system, pros/ 
cons based on vendor 
functionality and data 
providers, rating capabilities, 
and opportunities 


oe E Trade & Foreign Exchange &/ @™* Ņ} Exchange Traded 
ceil) Fixed mane(S) Position LO Money Markets\ SO Derivatives! 


Solution Components 


Managed Services Options 
Unified Portal 


Core Components 
| oe | | lm 
Fage B SS pe A 


Data Fabric Ce) 















Key Activities 


Analyzed client’s current 
state of 25+ derivative 
instruments including OTC, 
listed & pledged 

Optimized work flows for 
each derivative type and 
prioritization of which to 
migrate to a new system 
Ran vendor RFP process with 
2,000+ questions, scripted 
demos and final vendor 
decision in 120 days 
Implemented the new work 
flows/vendor integration 


Client Benefits 


Moved off of Excel as trade 
book and accounting record 
Full audit-trail with date and 
time stamp set up for all 
derivatives in book of 
business 

More common derivatives 
types like FX swaps handled 
(as well as more exotic 
investments such as 
dispersion swaps) 
Optimized work flows for 
each type of derivative 
established better 
integration and aligned to 
overall investment 
objectives of the firm 
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Accounting System Strategy 


Project Profile 


Process Flow 


3. Future 
DED D 








Publish initial 
Exhibit for 









Gather data Workshops 


* Phase 1A- 
Interviews 


* Phase 1B- 
Workshops 





















Review with 
Technology 









define 
requirements 


VOTC 


Business 
work reviews 
Deep Dives 
Data 
collection 
Develop 
exhibits & 













Publish final 
version of 
Exhibits 





Check point 


Future State 














The client needed a 
strategy for the 
replacement and upgrade 
of accounting systems. 
The incumbent system 
represented legacy 
technology, chart of 
accounts and inadequate 
data detail for the client’s 
business needs going 
forward 

Many were executing key 
accounting functions 
outside the core system 
since fields did not exist for 
key data elements 
required for calculations 


Broadridge worked 
closely with the client to 
examine the chart of 
accounts for change 
recommendations and 
deliver a holistic plan for 
migration to a future 
state accounting 
environment. 

Engaging key stakeholders 
in charge of each sub- 
ledger enabled a cohesive 
blueprint for future needs 
and helped easily identify 
the challenges with the 
current work flows across 
the book of business 


Defined accounting needs that 
were not supported by the 
corporate accounting solution 
and new functionality required 
(Basel & IFRS) 

Identified current transaction 
types that required changes in 
posting methods to accurately 
capture transactions 


e Prepared organization vendor 


search/selection with ballpark 
costs/timeframes 


e Helped secure business case 


approval to proceed to vendor 
search/replacement path 


Client Benefits 


The pre-planning and 
migration blueprint set up 
in the strategy facilitated a 
smooth transition during 
implementation, training 
and conversion 

Chart of accounts set-up in 
new system offered robust 
enriched data to manage 
holdings, positioned the 
firm to be compliance with 
IFRS and modern, complex 
accounting policies 
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Investment System Architecture 





Record & Replay for Web & 
Desktop Automation 


Web, Desktop & 
Mainframe Automation 


O Citrix Automation 


O BOT Scheduling & 
Allocation 


Basic Features 
O Entitlements [CxOs, 
Supervisors, Operators] 


O Auditing & Logging 
Alerts & Error [ 


O Thresholds] 


Handling 
@ Process Efficiency / 
Request Mgmt 


Context & Objectives Approach Client Benefits 


Migration plan for 
transformation on 
phased basis to manage 
change controls and 
organization's capacity 










Advanced BOT Categorization 
& Administration 


Project Profile 








Process 


Capture Process , Request & 


Workload , Thresholds & 
Management 


Advanced Features 


Process 
VU Definition & 
~ Workflow 
) Management Cognition / Intelligent / 
ie. Recommendation driven 
process /workflow 
management 


Supervisory & BOT 


Machine Controls / Dashboards 


(», Learning & 

(w Al Integration 

Core Components 
Broadridge & 


YU 3° Party 


Application 


Advanced Machine learning 
based BOT integration 
Integration 


Q Da & Process 


Execution 
Framework 


Integration with Broadridge 
Exception System / 


Applications 
v Online Process Definition / 


Human & BOT Tasks 
v Screenshot based process audit & tracking 


Process / 
Workflow 
Orchestration 





Defined future process including e 
“passing the book” for 24 hour 

trading coverage 

Presented the future state 

architecture to senior 


Broadridge worked ° 
closely with the client to 
develop a Target State 
Investment Architecture . 
covering publicly traded 


° Fragmentation of systems ° 
and operational set-up 
created significant lag in 
timeliness for reporting 

e Variations in capture and 


treatment of investments, assets. management with high-level cost to change 
pricing, consolidation e The approach included a estimates e Better clarity on lines of 
created additional review of people, e Collected and analyzed system business and 


comparing like-pieces 
of the business 


challenges for accurate processes and systems to solutions for strengths/ 


disclosure of holdings, risk 
profile and compliance 
reporting 

Areas of concern were 
trading, analytics/risk 
management, data 
management and 
accounting 


provide gap analysis 
from current operations 
to target state processes, 
as well as a migration 
sequence to assess the 
organization’s ability to 
remain competitive. 


weaknesses (including custom 


systems) and ranked them 
target state needs 


against 


Conducted joint analysis and 
design sessions with the client in 
business, IT, sales/marketing and 


operations groups 


° More effective month- 


end turnaround on 


global financial picture 
and more confidence in 


accuracy of the 
customers 
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Asset Servicing 





7 7 s 
Project Profile eee Project Infrastructure Workflow Cision 
: : Phases Initiation Build Analysis Development 
Client Major Global Bank & Interfaces 
Segment Institutional, Wealth Management, Prime Brokerage 
Geography | Global EE 
fc = Static Data ii 
nee Training Testing Build Planning 


Conversion 


Project Themes 


Strategic Visioning and Assessment 
Corporate Actions 


Technology and Business Process Transformation 


Context & Objectives Approach Client Benefits 





Live 


Conversion * All implementations follow the same set of standard project phases and tasks. 


* Not all phases and tasks are sequential but some key dependencies exist. 





The client needed to The Broadridge team worked e Strategic operating e Solution fully supports global 
transform their existing closely with the client to: model client servicing needs 
business model and was e Assess technology for e Integrated technical e Improved processing 

looking to define a future suitability solution efficiency and optimize 


state technology and 
supporting operating 
model for their global 


corporate action services. 


Conduct deep-dive 
visioning and CSA 
sessions 

Model future technical 
flows, platforms, 
interfaces, functional 
processes, and pain 
point (operational and 
technical) resolution 


High level requirements 
View on synergies 
Implementation 
roadmap with interim 
deliverable approach 
Resource planning 
Breakdown of 
estimated “cost to 
implement” and RTB 


people & organization 
structures 

Simplified technical 
architecture to address 
commercial objectives 


Remove control gaps / audit 
points and reduce processing 
errors and associated losses 
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Self Clearing Assessment 


Project Profile ari a2 o3 tra ars are |ar7 



































Client US Private Equity/Investment Manager ee a Tane 1-3 Months * Document Current Operating Model and Procedures 
Clearing Model 1-3 Months * Define Future Operating Model technology and 
Segment Asset Management erectondines> 
3-6 Months * Evaluation and selection of vendors along with 
ý contract development 
Geography United States contract development 
J 3-12 months * Identify additional documents and/or registration 
processes requiring amendment or notification 
Project Themes J 6-9 Months e Ongoing process to prepare supporting documents 
and information related to each CMA standard. 
Strategic Assessments i 3-9 months * Internal / External application development traced 
Clea rance and Settlement 6-12 months | * Agree and document conversion requirements. 
* Coordinate with surrendering clearing firms. 
Technology Initiatives 12-18 months | « Paea anen proteo : 
° ocument final sign off and archive 
Context & Objectives Approach Key Activities Client Benefits 
The client needed detailed The Broadridge team worked e Current state-to-strategic e Estimated financial impact 
analysis for transitioning ETF, closely with the client to plan for operations, technology 
equity, index and equity analyze: e Level of change to support and firm capital 
option market-making e Capital, funding and margin processes and options to e Full retention of revenue 
businesses from the current requirements minimize risk from fee based businesses 
fully-disclosed arrangement e General industry practices e Capital requirements and e Ability to estimate daily 
to aself-clearing model. Our œ Mid and back office funding analysis funding 
diversify clearing risk; create + Personnel requirements and areas affected and resource offering 
new fee based revenue costs requirements e Client information remains 
opportunity; and regain e Regulatory steps: in-house 
control over the markets, FINRA/CMA and FCM e Improved control over client 
product, clients, and the e Estimated clearing portal 
service it offers. corporation VAR 


e Clearing and settlement 
procedures (e.g. WSP) 





es Broadriage © 2018 | 10 


T+2 Test Scripts and Planning 


Have you executed and documented T+2 testing externally? (Examples): 





Project Profile *DTCC 0 Yes ANo []Don'tKnow 
. , .CCMA [0 Yes [No []DontKnow 
Client Major Global Bank i 
* Client(s) [0 Yes [No []DontKnow 
Segment Capital Markets N l a esit 
+ Managed Services [0 Yes 0No []DontKnow 
G eog ra p hy U SA/ E M E A/ A PAC Have you executed and documented T+2 testing internally? (Examples): 
+ Front Office Systems 0 Yes [No {Don't Know 
Project Themes + Middle Office Systems Yes [No {Don't Know 
+ Operations Needs 0 Yes [No {Don't Know 
Regulatory and Industry Mandated 
+ Client Reports/Portals/Interactions OD Yes [No {]Don’t Know 
Transformation Management + Back Office Systems [ Yes [No [)Don't Know 


Do you have contingency plans & staff in place for September 5 to handle challenges in Canada/US? O Yes [No {]Don’t Know 


Program Management and Execution: Testing 





Do you have staff in place for any settlement challenges September 4 with Mexico? 0 0) Don’t Know 


Yes [No 
Context & Objectives Approach Client Benefits 


In accordance with US 


industry-mandated initiative 


T+2, the client needed 
enhancements in a unique 
T+2 test environment that 
connects to the DTC T+2 
environment as well as 
other internally impacted 


processes and departments. 


Broadridge provided full $ 


offering suite from test 
preparation through to test 
execution , results 
attestation, and 
documentation archiving 
so client retains full 
transparency and audit 
trail retrieval ability. 


Agreed on test approach ° 


Compiled testing 
requirements 
Created test scripts 
Built out of internal 
infrastructure 
Installed T+2 fixed income 
and equity test 
environments 
Regression and user 
acceptance testing 
Client training 
Provided services for 
multiple clients 
Attestation protocol 


Central program 
governance 

Cross organization risk & 
dependency resolution 
management 

Test cases with attestation 
Access to highly skilled 
testing resources and 
program managers 
Minimizes vendor risk 
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Liquidity Risk Management 


Project Profile 


Context & Objectives Approach Client Benefits 


The Bank had identified 
deficiencies in their Liquidity 
Management process and 
wanted to create a liquidity 
framework that would 
adequately account for the 
potential risks across multiple 
dimensions (e.g. Product, Line of 
Business etc.). The practice of 
constant risk assessment 
ensured sufficient liquidity to 
withstand emerging stress 
events. 





Performed source 
systems data analysis and 
series back-testing. 
Created a Proof of 
Concept for simulating 
functionalities required 
with new enriched 
liquidity data sets. 


Reclame Views Positions 


by Client, 
Connectivity and 2 
EES Account, or 
Entity 
Real-time Bank Cash Holds for 
Connectivity and Funding / 
Matching Payments 


Global Real-time 
View — USER 
Specific 


Intraday Balance 
Updates and 
Management 


Exception 
Processing for 
non Standardized 
Processing 


Four Eye Control 


Total / Value 


Intraday Liquidity Payments 


Streamlined calculation of HQLA, 
and other metrics for LCR 
reporting 


s Automated Liquidity Risk 
Reporting & Stress Testing 
platform 


° Accelerated liquidity 
management reporting from a 
monthly process to a daily one 


e Built local Stress capability, 
providing transparency for LCR 
and NSFR forecasts 


e Produced the requirements to 
meet the demands of BCBS239 


Funding Estimated and 
Proposals Target Balances 
Reconciliation for Cash Flow 
Balances and Matching with 
Transactions Alerts 
User Defined 5 
Manage Client 
Views of Debits 
and Credits Cash Balances 
Prioritization of 
Payments Hold / Releases 
Regulatory 
Reporting Customizable 
Capabilities 


Delivered the 
components of a 
reporting and scenario 
analysis platform 
supporting intra-day and 
liquidity risk 
management 
capabilities 

Created reporting 
capability for daily and 
on demand funds 
transfer pricing. 
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Balance Sheet Substantiation 





Project Profile 


Major Global Bank 
Capital Markets 


Geography USA, EMEA, APAC 








Project Themes 
Accounting Control Assessment 


Accounting and Finance 





menin ate Le aan EN Tror ca Trareattion 

Transformation Management i | 

Context & Objectives Approach Key Activities Client Benefits 
The client struggled to Broadridge partnered Conducted current state Streamlined highly 
streamline a highly fragmented, with the client to assessment that resulted in a fragmented and manually 
manually intensive balance conduct a current state firm-wide reengineering project intensive process 
sheet substantiation process assessment and map e Implemented project e Holistic oversight and 
that exposed the Bank to out a future state. management, functional management of regional 
above-average levels of e Partnered with analysis, and technical design to general aes 
operational risk. The client was stakeholders globally to the project Creation of consistent 
challenged to bring together nee . ; attestation process 
cultileceeianalcenccal ensure a holistic and e Resolved the operational risk eed Sknosurc 0 

P g 6 globally viable solution issues and provided the bank p 


ledgers under a consistent operational risk 


attestation process that with benefits in three main 


ensured completeness in areas: Control, Services, and 

account ownership and balance Effectiveness 

approval. ° Managed various projects 
within a cross-regional program 
which included teams from the 
UK, Spain and India 
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Internal Audit Methodology Development 





L] 
Audit Needs Priorto Audit Audit Audit 
Assessment 1 Planning 1 ae I Fieldwork 1 Reporting 


I 
1 
l 
I | I 
Planning RCM Review Jf) Fieldwork tional 
Kickoff tears 
psen, ; 


I a 
I I 
I I 
Initial 
I I 
[j I — 
I I l 
I I 
I I 
I I 
[j I 
I I 
I I 


Project Profile 


US Commercial Bank 


1 
I 
1 
1 
1 
Geography North America l 
I 
1 
! 





Closeout Meeting (if 
Necessary) 


Issue Final Report 








Project Themes 


| © Stakeholder 
Engagement 
Tv Risk Assessments 
Updated as Needed 
Y Updates to AC as 


bv Within 15 Days 
|“ Business Review 
v Final Draft 
Y Executive Stakeholder 
Notification 
Y Final Report Issuance 


¥ Define Initial Vy Agree to Issues 
ih Tv identify Root Cause 
¥ Agree on Action Plan 
¥ Review and Approve 
Work Papers 


Y Staffing and Budget 
oe Y Discuss and Agree to Key 


Risks 

v Identify Existing or 
Previous control Issues 

Identify Any Issues that 
Need to be Validated 

v Determine Design 
Effectivenes: 

v Develop Plan for Testing 
Control (i.e. Testing 
Methods 


Context & Objectives Approach Client Benefits 





As the bank grew towards $10 
billion in assets, the Senior 
Management and the Audit 
Committee discovered a need 
to develop and implement a risk 
based audit methodology. They 
desired to migrate the 
methodology from a processes 
based system to a risk based 
system. By implementing the 
new methodology, the Bank 
was able to align their audit 
plan to the Bank’s evolving 
risks, audit entities on a more 
realistic cadence, allocate 
resources properly, and reduce 
audit costs. 


Mapped business processes 
to business units. 

Created new audit universe 
Developed Risk Assessment 
Methodology 

Risk Assessed each 
auditable entity 

Created 3 Year Audit Plan 
(rolling) 

Conducted Staffing analysis 
Developed QAIP 

Developed Audit 
Methodology Manual 
Updated Audit Committee 
Reporting 


Entity Level Risk 
Assessments 


Business Process Mapping 


3 Year Audit Plan with all 
Auditable Entities 


Audit Manual 


Staffing Analysis with 
resource solutions 


Quality Assurance Plan 
New Internal Audit Report 


New Audit Committee 
Reports 


Training for staff and key 
stakeholders 


Risk focused Internal 
Audit process 

Better equipped to 
identify and measure risk 
More flexibility to update 
Audit Plan quarterly 
More accurate budgeting 
knowing staffing 
requirements 

Ability to perform 
Quality Assurance 
reviews 

Better Stakeholder and 
Audit Committee 
reporting 

Compliance with IIA 
Standards 
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Third Party Oversight Program 


Project Profile 


Context & Objectives Approach | KeyActivities | Client Benefits 


Following the financial crisis, 
considerable vendor risk 
emerged. In light of that risk and 
the company’s large outsourcing 
activity, management wanted to 
ensure they were compliant with 
the newly issued regulatory 
bulletin OCC 2013-29. We were 
engaged to conduct a gap 
analysis and provide remediation 
suggestions to improve their 
third party oversight program. 
Management also wanted to 
identify the best vendor 
management solution for their 
risk profile. 


Broke down the supplier 
life cycle into five phases: 
outsourcing strategy, due 
diligence, contracting, 
monitoring, and off- 
boarding 

Evaluated each phase to 
the requirements of the 
regulatory bulletin 


Supplier Request 
Recording 


Supplier Selection 


Supplier Evaluation 


Supplier 
Negotiation 


canceled 


Key Activities 


Created detailed assessment 
of each phase of the life cycle 


Provided suggested 
remediation steps to cure any 


gaps 


Provided a high level timeline 
to demonstrate effort 
needed to remediate 


Conducted vendor software 
workshop to help 
management determine the 
solution that best fit the 
banks vendor risk profile 


negotiated 
Supplier Service 
Delivery 
Supplier Service 
Termination 


Reporting 
Management 





Understood how the 
program complied or 
didn’t comply with the 
regulatory bulletin 
Gained perspective on 
level of effort needed to 
remediate gap findings 
Identified the best vendor 
management solution for 
the vendor risk profile of 
the institution 
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COSO ERM Implementation 





Project Profile 


US Commercial Bank 
Risk Management 


North America 


Client 


Segment 


Geography 


Project Themes 


Risk Appetite 
Risk Assessment 


Risk Monitoring 





Monitoring 





Context & Objectives Approach Deliverables Client Benefits 


As the bank approached $10 ° Identified current risk 
billion in asset size, processes within the Bank 
management wanted to ° Conducted a gap analysis 


implement the COSO ERM 
framework. The primary 

objective was improve the 

Bank’s risk management process œ 
and function to better identify, 
measure, monitor, and control ° 
the risks within the Bank. 


with current processes and 

the 8 elements of COSO 

ERM 

Developed an action plan 

to remediate those gaps 

Identified the three lines of 

defense 

° Mapped all business 
processes back to each 
business unit 

° Conducted Risk 
Assessments on each 
business process 


Risk Appetite Statement 
Written ERM Program 


Roles and Responsibilities for 


each line of defense 


Enterprise wide Risk 
Assessment Methodology 


Risk assessments with 
Inherent and Residual risk 
scores for each business 
process 


Key Risk Indicators and Key 
Performance Indicators 


Risk Management 


Committee development and 


reporting 


Improved ability to 
identify, measure, and 
monitor risk 

Better Board and 
Committee reporting 
Better demonstrate to 
regulators an effective 
risk management 
program 

Common taxonomy for 
risk discussions 

Risk focused culture 
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Credit Risk Management Audit 


Project Profile 





Engaged to conduct an audit of 
the Credit Risk Management 
(CRM) Department. The 
objective of the audit was to 
provide a level of assurance on 
the process, risks, and controls 
that allow the CRM Department 
to effectively monitor and 
manage the credit risk within the 
Bank. 





Risk-based approach 
Reviewed the current 
process, risks, and control 
matrix 

Conducted risk assessments 
to determine the risks with 
the highest residual score 
Developed scope 
Conducted and documented 
design effectiveness testing 
Conducted and documented 
operational effectiveness 
testing 

Provided report to Chief 
Auditor 


Activity Month1 Month2 Month3 Month4 Month5 Months 6-9 


Pre contract plans and 


SLA, Scope, techn 
Project Kickoff anı 


Systems assessment and plans 


Finalize Project Pl 


Managed Services On-site assessment and due diligence 
Initial BCP Plan and Requirements 


preparation (staffing, contingency plan, phases, 
iology, project office) 
d Governance 


contract with e _g 


lans and Reporting 


System access and other requirements 
Regulatory Notices (OCC, FINRA) 


Initial Client and Street-side Notifications 
Client Supervisory Office 


DFL 
WSP and PNP 


Dashboard and SLA 
BPO Systems installed and tested 


System access 
Record Retention 
Escalation lists an 


\d Service Model (800#) 


Final Client and Street-side Notifications 


Mock Operation 


BCP Calling Tree and Plan 


Go Live 


Context & Objectives Approach 


Updated Risk Control 
Matrix 


Updated risk assessments 


Control Testing 
documentation 


Meetings with stakeholders 


Issues and management 
action plans 


Complete audit report with 
supported opinion on level 
of assurance 




















Client Benefits 


Level of assurance the 


CRM Department 


properly monitored and 
managed the credit risk 


profile 


Understood the issues 


that were raised 
Ability to monitor 
remediation efforts 


Ability to report to the 
Audit Committee with 
confidence the level of 
assurance on the control 
environment with this 


area 
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Regulatory Reporting Audit 





Project Profile 


International Foreign Branch 






In-house 
systems 


Vendor 
system 
Vendor 
system 


Reference 
Data 









External look-ups Py Configurable end-user dashboards 
determination, etc. * Data lineage 
insideTRACK | e Rules traceability 
a 


Harmonized 
Data Format 


BROADRIDGE REGULATORY REPORTING 


Internal Audit 
North America 


Project Themes 


Report Mapping 
Process Mapping 


Regulatory Report Submission Verification 


Context & Objectives Approach Client Benefits 


Updated Risk Control Matrix e Level of assurance the 
Regulatory Reporting 
Department was properly 
filing the FR 2052a 
Report 

Understood any 





futureLANDSCAPE 
Database of trade 


ARMs 

APAs 

MiFID 
MiFID II 





Other 
jurisdictions 
including 
Canadian, 
Swiss, Asian 











Risk-based approach e 
Identified the processes 
implemented to conduct 
reporting e 
Conducted risk assessments 
to determine the risks with 


Engaged to conduct an audit ` 
of the Regulatory Reporting ° 
Department. The objective of 

the audit was to provide a 

level of assurance the ° 
Department’s progress 


° Updated risk assessments 


Control Testing 
documentation 


e Meetings with stakeholders 


implementing the FR 2052a 
reporting requirements. 


the highest residual score 
Developed scope 
Conducted and documented 
design effectiveness testing 
Conducted and documented 
operational effectiveness 
testing 

Provided report to Chief 
Auditor 


Issues and management 
action plans 


Complete audit report with 
supported opinion on level of 
assurance 


outstanding gaps 
Ability to monitor 
remediation efforts 


Ability to report to the 
Audit Committee with 
confidence the level of 
assurance on the control 
environment with this 


area 
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Model Risk Management 


Project Profile 


Context & Objectives Approach 


The Bank received adverse 
regulatory feedback that they 
did not have an appropriate 
model governance framework 
in place, despite heavy reliance 
on pricing, risk and capital 
models in the day-to-day 
operation of their business 
lines. 





Understand regulatory 
expectations according to 
the size and scope of the 
bank’s activities 
Performed a current state 
vs. future state gap 
analysis 

Created a proposed 
organization structure and 
prioritized implementation 
plan, including 
socialization and 
management buy-in 
Executed the 
implementation plan 


|} ooo 


Project Documentation 
Specialist Input 


Risk Categories 


IDENTIFY Risk Classifications Probability Analysis 
| Key Sensitivities 


Key Criticalities 


Ni 
obackves Classified Risks Bunny 





Workshops 

Risk Groups 

Risk Databie 
Previous Experience 
WBS 





Risk Probability 
Impact Analysis 


‘a 
Quantified Risks 


Risk Reporting 
| Historic Risk Data 


Y Risk Management Plan 








Project Execution Strategy 


Prioritized Risks ga 


Risk Limitation Strategy 4——— — | | aop | 
Key Performance Indicators 


Control 
Contingency Provision 


Working group and 
committee set-up 


. Organization structure, 
reporting lines, policies, 
procedures and process 
workflows 


° Firm-wide model inventory. 


e Model development, 
validation and rating 
standards. 


e Management and board 
reporting on model risk 


Client Benefits 


Enhanced control over 
the development and 
usage of models across 
the bank 

Ability to meet 
regulatory requirements 
in a repeatable and 
sustainable manner 
Ability to measure, 
monitor and 
communicate the extent 
of model risk throughout 
the bank 
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Geography US, EU, APAC 





Volcker Rule Implementation 


Project Profile 


Foreign Banking Organizations 


Project Themes 











1. Policies and Procedures 


Documents, describes, monitors 
and limits prohibited trading 
activities and investments by 


2. Internal Controls 


Monitors compliance with the 
rule and to prevent the 
occurrence of activities or fund 
banking entitv to ensure that all of | | investments that are prohibited. 


3. Management Framework 





Clear responsibility and 
accountability should be 
established for compliance with 
the rule including management 





4. independent Testing 


The effectiveness of the compliance 
program should be audited by 
qualified personnel of the banking 
entity or outside party. 











Ensure that trading personnel, 
managers, and other appropriate 
personnel understand the compliance 
program and can effectively comply. 





6. Record Retention 


Ensures that sufficient records are kept, 
minimum of 5 years, to demonstrate 
compliance with the rule and the banking 
entity must promptly provide it to the 
regulator upon request. 








7. Enhanced 


Reporting 


For entities with sufficient scale, a panel of 7 quantitative metrics must be calculated for 
each trading day and reported to the relevant regulatory agency on timelines varying 


GCE Trt St from quarterly by Quarter end +30 days to monthly by Month end +10 days. The 








8. Covered Funds 


Documentation 


For banking entities with sufficient scale, detailed documentation is required to 
describe the scope and nature of the firm’s covered fund activities. The requirements 
include detailed mapping of each covered fund and pool the banking entity sponsors or 


Context & Objectives Approach Client Benefits 


The Volcker Rule prohibits 
banks from engaging in certain 
trading and funds activities, 
with compliance requirements 
staggered according to the size 
and scope of the banks’ 
activities. Banks were required 
to proactively prove compliance 
with the Rule 


Performed a regulatory 
impact assessment, 
including desk definition 
and activity analysis 
Prepared a detailed 
implementation plan and 
timeline. 

Created and establish 
compliance program 
framework, including 
policies and procedures, 
training, CEO attestation 
framework 
Independent testing 
support 

Implemented metrics 
reporting capability 


Regulatory impact 
assessment / gap analysis 


Detailed implementation 
plan 


e Compliance program 
framework, written policies 
and procedures 


° CEO attestation framework 


e Training materials for front 
office and compliance 
professionals 


e Metrics reports submitted to 
regulators 


e Independent testing plans 


Ability to demonstrate 
Volcker Rule compliance 
to regulatory agencies 
Enhanced understanding 
of business activities 
across the banks. 
Enhanced understanding 
of Volcker Rule 
requirements across the 
banks. 
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Comprehensive Capital Analysis and Review 


z : | Capital requirements: 
Project Profile | _ stress capital buffer 
Current capital : CCAR stress test results 


„ | Starting 


I 
[i 
[i 
Co clical 
requirements ' unter-cy 
Global Clearance & Custody Bank capital buffer 
i I 
- | cme | : 
i 
i [i 
North America i ' 
im Stress capital buffer: H 
i [i 
i [i 
i [i 
i 
i 
! 
1 
' 
i 
' 
[i 
! 


CCAR stress test 


results 


Minimum 


2.5% capital 
conservation buffer i (minimum 2.5%) 


Project Themes 


Regulatory Change Management 
4.5% minimum ) 4.5% minimum 
CCAR 


Context & Objectives Approach Client Benefits 


In preparation for the annual ° Leveraged Fed guidance, Detailed gap analysis Identification of 
Dodd-Frank Act Stress Test supervisory range of potential issues in 





Start Ql Q2 Q3 Q4 Q5 Q6 Q7 Q8 Q9 





° Prioritized 


(DFAST) and Comprehensive practice and peer recommendations for advance of the o 
Capital Adequacy and Review institution practices improvement regulatory examination 
(CCAR) process, the bank e Compared the bank’s e Preparation of bank 
requested a review of their program against e Project plan and discussion executives for likely 
CCAR program. supervisory guidance and deck to address gaps (to be areas of regulatory focus 
observed peer practices. shared with regulators) and feedback; executive 
° Prepared gap analysis, understanding of “what 
including assessment of to expect” 
criticality of findings. e Preparation of bank 


narratives to be shared 
with regulators 
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